OPENSUSE-SU-2020:0802-1 Security update for nodejs8

This update for nodejs8 fixes the following issues: - CVE-2020-8174: Fixed multiple memory corruption in napigetvaluestring bsc1172443. - CVE-2020-11080: Fixed a potential denial of service when receiving unreasonably large HTTP/2 SETTINGS frames bsc1172442. - CVE-2020-7598: Fixed an issue which...

OPENSUSE-SU-2020:0794-1 Security update for vim

This update for vim fixes the following issues: - CVE-2019-20807: Fixed an issue where escaping from the restrictive mode of vim was possible using interfaces bsc1172225. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0781-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2019-19956: Reverted the upstream fix for this memory leak because it introduced other, more severe vulnerabilities bsc1172021. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0719-1 Security update for dom4j

This update for dom4j fixes the following issues: - CVE-2020-10683: Fixed an XML External Entity vulnerability in default SAX parser bsc1169760. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0694-1 Security update for openconnect

This update for openconnect fixes the following issues: Security issue fixed: - CVE-2020-12105: Fixed the improper handling of negative return values from X509check function calls that might have allowed MITM attacks bsc1170452. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0680-1 Security update for libvpx

This update for libvpx fixes the following issues: - CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames bsc1166066. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0679-1 Security update for libbsd

This update for libbsd fixes the following issues: - CVE-2019-20367: Fixed an out-of-bounds read during a comparison for a symbol names from the string table bsc1160551. This update was imported from the SUSE:SLE-15:Update update project...

SUSE-SU-2020:1193-1 Security update for openldap2

This update for openldap2 fixes the following issues: - CVE-2020-12243: Fixed a denial of service related to recursive filters bsc1170771...

OPENSUSE-SU-2020:0564-1 Security update for salt

This update for salt fixes the following issues: - Fix CVE-2020-11651 and CVE-2020-11652 bsc1170595 This update was imported from the SUSE:SLE-15-SP1:Update update project...

Security update for git (important)

openSUSE Security Update: Security update for git Announcement ID: openSUSE-SU-2020:0524-1 Rating: important References: 1168930 Cross-References: CVE-2020-5260 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for git fixes th...

OPENSUSE-SU-2020:0510-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2020-1730: Fixed a possible denial of service when using AES-CTR bsc1168699. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:0479-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2020-0556: Fixed an improper access control which could have allowed an unauthenticated user to potentially enable escalation of privilege and denial of service bsc1166751. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0400-1 Security update for cloud-init

This update for cloud-init fixes the following security issues: - CVE-2020-8631: Replaced the theoretically predictable deterministic RNG with the system RNG bsc1162937. - CVE-2020-8632: Increased the default random password length from 9 to 20 bsc1162936. This update was imported from the...

SUSE-SU-2020:0538-1 Security Beta update for Salt

This update fixes the following issues: salt: - Fix 'osfamily' grain for Astra Linux Common Edition - Update to Salt version 2019.2.3 CVE-2019-17361 bsc1163981 See release notes: https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html - Enable passing grains to start event based on...

OPENSUSE-SU-2020:0247-1 Security update for ipmitool

This update for ipmitool fixes the following security issue: - CVE-2020-5208: Fixed several buffer overflows bsc1163026. This update was imported from the SUSE:SLE-15-SP1:Update update project...

SUSE-SU-2020:0384-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 68.5.0 ESR CVE-2020-6796 bmo1610426 Missing bounds check on shared memory read in the parent process CVE-2020-6797 bmo1596668 Extensions granted downloads.open permission could open arbitrary application...

OPENSUSE-SU-2020:0160-1 Security update for python-reportlab

This update for python-reportlab fixes the following issues: - CVE-2019-17626: Fixed a potential remote code execution because of the lack of input sanitization in toColor bsc1154370. This update was imported from the SUSE:SLE-15:Update update project...

OPENSUSE-SU-2020:0084-1 Security update for Mesa

This update for Mesa fixes the following issues: Security issue fixed: - CVE-2019-5068: Fixed exploitable shared memory permissions vulnerability bsc1156015. This update was imported from the SUSE:SLE-15-SP1:Update update project...

OPENSUSE-SU-2020:0080-1 Security update for php7

This update for php7 fixes the following issues: - CVE-2019-11045: Fixed an issue with improper input validation in the filename handling of the DirectoryIterator class bsc1159923. - CVE-2019-11046: Fixed an information leak in bcshiftaddsub bsc1159924. - CVE-2019-11047, CVE-2019-11050: Fixed...

OPENSUSE-SU-2020:0059-1 Security update for nodejs8

This update for nodejs8 to version 8.17.0 fixes the following issues: Security issues fixed: - CVE-2019-16777, CVE-2019-16776, CVE-2019-16775: Updated npm to 6.13.4, fixing an arbitrary path overwrite and access via 'bin' field bsc1159352. This update was imported from the SUSE:SLE-15:Update upda...